Security agents — security, compliance, privacy specialists
Plugin sdlc-team-security from marketplace ai-first-sdlc in SteveGJones/ai-first-sdlc-practices. Commands read from the repo's manifest — 1 month ago.
compliance-auditorComprehensive compliance auditing for SOC 2, ISO 27001, PCI DSS, GDPR, AI regulations, and security standards. Use for pre-audit assessments, gap analysis, evidence validation, and multi-framework compliance reporting.
compliance-report-generatorExpert in SDLC compliance reporting, metrics visualization, remediation tracking, and audit-ready documentation. Use for creating actionable reports tailored to different audiences (team, executive, auditor) and tracking compliance trends.
data-privacy-officerExpert in GDPR, CCPA/CPRA, LGPD, PIPL, and privacy-by-design. Use for privacy impact assessments, data subject rights implementation, consent management, data minimization strategies, and multi-jurisdiction privacy compliance.
enforcement-strategy-advisorExpert in behavioral change psychology for software teams, enforcement strategy design, and SDLC adoption coaching. Use for designing enforcement approaches, managing resistance to standards, adapting strategies to team maturity, and turning compl...
security-architectExpert in security architecture design, threat modeling, zero-trust principles, and secure SDLC integration. Use for architectural security reviews, compliance framework guidance, threat modeling sessions, and security strategy development.
Filesystem-based project knowledge base — librarian agent, hash-tracked indexes, cross-library queries with priming + synthesis, audit log, parallel map-reduce bulk ingest, ingest/query/lint operations
16 skills · 4 agents
Containerised delegated execution — Archon DAG workflows with team-scoped Docker containers, tiered termination, 4 bundled workflows, 6 skills
6 skills · 10 commands · 1 agent
Core SDLC rules, validators, enforcement, and workflows
9 skills · 4 agents · hooks
AI/ML specialist agents — architects, prompt engineers, RAG designers
14 agents
Cross-model council — assess the models reachable via locally installed peer agentic CLIs (codex, agy, opencode) against a standardized problem stack, cast them into a roster, and run cross-model fan-out plays (v1: Diff+Synthesis) chosen per project. Built on a unified delegation contract with graded permission postures; in-session and uncontainerised, distinct from sdlc-workflows' Archon/Docker/DAG delegation
1 skill · 7 commands · 2 agents
Android development — Material Design 3, Compose, app architecture, Gradle, Play release & performance agents + scaffold/signing/play-release skills & Play pre-flight checks (pairs with sdlc-team-mobile)
4 skills · 6 agents
Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses
200 skills · 98 commands · 71 agents · 1 MCP server · hooks
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.
hooks
ADR lifecycle management — create, index, supersede, and link Architecture Decision Records to code
5 skills · 1 command · 1 agent
Install the "AAS Security Engineer" editorial skill bundle for Claude Code.
12 skills
Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture
24 skills · 2 agents
SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening
5 skills · 3 commands · 2 agents
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.